Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort GPL FTP iss scan rev 7 2011-12-02
snort ET WEB_SPECIFIC_APPS Zabbix popup.php INSERT INTO SQL Injection Vulnerability rev 2 2011-12-02
snort GPL FTP tar parameters rev 14 2011-12-02
snort ET WEB_SPECIFIC_APPS Zabbix popup.php UNION SELECT SQL Injection Vulnerability rev 2 2011-12-02
snort GPL FTP pass wh00t rev 7 2011-12-02
snort ET WEB_SPECIFIC_APPS Zabbix popup.php DELETE FROM SQL Injection Vulnerability rev 2 2011-12-02
snort ET WEB_SPECIFIC_APPS Zabbix popup.php SELECT FROM SQL Injection Vulnerability rev 2 2011-12-02
snort GPL SQL sa brute force failed login attempt rev 4 2011-12-01
snort GPL FTP MKD overflow rev 12 2011-12-01
snort GPL NETBIOS SMB-DS NT Trans NT CREATE unicode invalid SACL ace size dos attempt rev 5 2011-12-01
snort GPL NETBIOS SMB-DS NT Trans NT CREATE unicode invalid SACL ace size dos attempt rev 5 2011-12-01
snort GPL SCAN adm scan rev 7 2011-12-01
snort GPL NETBIOS SMB NT Trans NT CREATE invalid SACL ace size dos attempt rev 5 2011-11-30
snort GPL NETBIOS SMB-DS NT Trans NT CREATE SACL overflow attempt rev 5 2011-11-30
snort GPL NETBIOS SMB-DS NT Trans NT CREATE DACL overflow attempt rev 5 2011-11-30
snort GPL NETBIOS SMB NT Trans NT CREATE SACL overflow attempt rev 5 2011-11-30
snort GPL NETBIOS SMB NT Trans NT CREATE unicode invalid SACL ace size dos attempt rev 5 2011-11-30
snort GPL NETBIOS DCERPC CoGetInstanceFromFile overflow attempt rev 4 2011-11-30
snort GPL NETBIOS DCERPC msqueue bind attempt rev 4 2011-11-30
snort GPL NETBIOS SMB-DS NT Trans NT CREATE invalid SACL ace size dos attempt rev 5 2011-11-30
snort GPL NETBIOS DCERPC IActivation little endian bind attempt rev 3 2011-11-30
snort GPL NETBIOS DCERPC msqueue little endian bind attempt rev 4 2011-11-30
snort GPL NETBIOS SMB-DS NT Trans NT CREATE oversized Security Descriptor attempt rev 4 2011-11-30
snort GPL NETBIOS DCERPC irot little endian bind attempt rev 3 2011-11-30
snort GPL NETBIOS DCERPC irot bind attempt rev 3 2011-11-30
snort GPL NETBIOS SMB NT Trans NT CREATE invalid SACL ace size dos attempt rev 5 2011-11-30
snort GPL NETBIOS SMB NT Trans NT CREATE DACL overflow attempt rev 5 2011-11-30
snort GPL NETBIOS SMB-DS NT Trans NT CREATE unicode SACL overflow attempt rev 5 2011-11-30
snort GPL NETBIOS DCERPC IrotIsRunning little endian attempt rev 4 2011-11-30
snort GPL NETBIOS SMB-DS NT Trans NT CREATE invalid SACL ace size dos attempt rev 5 2011-11-30
snort GPL NETBIOS SMB NT Trans NT CREATE unicode invalid SACL ace size dos attempt rev 6 2011-11-30
snort GPL NETBIOS DCERPC IActivation bind attempt rev 3 2011-11-30
snort GPL NETBIOS DCERPC IrotIsRunning attempt rev 4 2011-11-30
snort GPL NETBIOS SMB-DS NT Trans NT CREATE unicode DACL overflow attempt rev 5 2011-11-30
snort GPL NETBIOS SMB NT Trans NT CREATE unicode DACL overflow attempt rev 5 2011-11-30
snort GPL NETBIOS SMB NT Trans NT CREATE unicode SACL overflow attempt rev 5 2011-11-30
snort ET MOBILE_MALWARE Android/SndApp.B Sending Device Information rev 1 2011-11-24
snort ET MOBILE_MALWARE Android/Ozotshielder.A Checkin rev 1 2011-11-24
snort ET MOBILE_MALWARE Android/KungFu Package Delete Command rev 1 2011-11-24
snort ET POLICY Windows Mobile 7.0 User-Agent detected rev 2 2011-11-21